Avoid buffer overruns by allocating buffer in svcauth_gss_validate()

Reviewed-by: Chuck Lever <chuck.lever@oracle.com>
Signed-off-by: Steve Dickson <steved@redhat.com>